REMARKS 



In view of the above amendments and the following remarks, further examination and 
reconsideration of the objections and rejections in the Office Action of November 26, 2008 are 
respectfully requested. 

The specification and abstract have been carefully reviewed and revised to make 
grammatical and idiomatic improvements. The amendments to the specification and abstract are 
incorporated in the attached substitute specification and abstract. No new matter has been added. 
Also attached hereto is a marked-up version of the changes made to the specification and abstract 
by the current amendment. The attachment is captioned " Version with Markings to Show 
Changes Made ." 

Claims 1, 2, and 17 have been canceled without prejudice or disclaimer to the subject 
matter contained therein. New claims 20 and 21 have been added. 

Applicants thank the Examiner for the indication of allowable subject matter of claims 3- 
7 and 9-14 on page 5 of the Office Action. Claims 3 and 9 have been rewritten in independent 
form including all the limitations of their respective base claims. Claims 4-7 and 10-14 now 
depend from claims 3 and 9, respectively. 

On pages 2 and 3 of the Office Action, claims 16 and 17 are rejected under 35 USC § 101 
as directed to non-statutory subject matter. The rejection of claim 17 is moot in view of its 
cancellation. Claim 16 has been amended to be directed to a computer-readable recording 
medium storing a computer program used in a content moving device. Accordingly, this 
rejection is believed inapplicable to the current claims, and its withdrawal is respectfully 
requested. 

On pages 3-5 of the Office Action, claims 1, 2, 8, 15, 18, and 19 are rejected under 35 
USC § 102(b) as being anticipated by Herpel et al. (EP 1045388). This rejection is moot with 
respect to claims 1 and 2 in view of their cancellation. Claim 8 now depends from claim 3, 
which is believed allowable over the prior art. Claims 15, 18, and 19 have been amended to 
recite limitations from claim 9 which distinguish them over the prior art. Accordingly, this 
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rejection is believed inapplicable to claims 8, 15, 18, and 19, and withdrawal of the rejection is 
respectfully requested. 

New claims 20 and 21 also recite limitations from claim 9 which distinguish them over 
the prior art of record. 

Accordingly, it is submitted that claims 3, 9, 15, 16, and 18-21 are allowable over the 
prior art of record, as are claims 4-8 and 10-14 depending therefrom. 

In view of the foregoing amendments and remarks, it is respectfully submitted that the 
present application is clearly in condition for allowance. An early notice thereof is earnestly 
solicited. 

If, after reviewing this Amendment, the Examiner feels that there are any issues 
remaining which must be resolved before the application can be passed to issue, it is respectfully 
requested that the Examiner contact the undersigned by telephone in order to resolve such issues. 



Respectfully submitted, 
Yoshikatsu ITO et al. 

/Aldo A. D'Ottavio/ 
3y. 2009.02.26 1 5:21 :42 -05'00' 

Aldo A. D'Ottavio 
Registration No. 59,559 
Agent for Applicants 

AAD/JRF/kh 

Washington, D.C. 20006-1021 
Telephone (202) 721-8200 
Facsimile (202) 721-8250 
February 26, 2009 
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Version with Markings to 
Show Changes Made 

DE S CRIPTION 

CONTENT MOVING DEVICE, CONTENT MOVING METHOD, COMPUTER 
PROGRAM, RECORDING MEDIUM, AND CONTENT MOVING SYSTEM 

5 BACKGROUND OF THE INVENTION 
TECHNICAL FIELD 

[0001] The present invention relates to a content moving 

system which includes a content moving device and a recording 

medium, and in particular to a technique for preventing 
10 unauthorized use of content and improving user-friendliness . 

BACKGROUND ART 

[0002] In recent years, digital content (hereafter, 

"content") such as movies have been widely distributed using 
15 BS digital broadcasting, terrestrial digital broadcasting, 
etc . 

Given that copying content is easy and does not result 
in degraded quality, copy control information (CCI) , which 
is for performing control of content copying and copy 
20 generation management with the goal of copyright protection, 
is attached to the content. 

[0003] For example, if the CCI is set to "Copy One 

Generation" which indicates that copying of a content is 
permitted only one time, and the content is copied, the 
25 resulting copied content will have copy control information 
set to "Copy No More" which indicates that copying is not 
possible . 

If the CCI is set to "Copy No More," the content cannot 



be copied to another recording medium or device, although 
it is possible to move the content while protecting a 
copyright (ref . Japanese Patent Application Publication No. 
2003-228522 p atcnt document 1 ) . 
5 [0004] The above corresponds to a case of moving a 

content recorded on a HDD (Hard Disk Drive) built into a 
digital television to an SD card. After moving the content, 
it is necessary to disable use of the content everywhere 
except on the SD card by erasing the content recorded on the 
10 HDD. 

Also, if the move oourcc content is high-definition and 
large in size, and the recording volume of the 
move -destination SD card is smaller than the content, the 
content is often converted to low-definition to reduce the 
15 size before being moved. 

Patent document 1; — Japaneae Patent Application Publication 
No. 2003 22S522 

DISCLOSURE OF BRIEF SUMMARY OF THE INVENTION 

20 PROBLEMS SOLVED BY THE INVENTION 

[0005] However, once the content is moved to a 

move -destination with a small recording volume, even if the 
content is moved back to the move source HDD which has a large 
recording volume, only playback of the low-definition 

25 content is possible, which is disadvantageous for the user. 

In view of the above problem, an object of the present 
invention is to provide a highly user-friendly content moving 
device, content moving method, computer program, recording 



medium, and content moving system which prevent unauthorized 
copying and, if a moved content which has been irreversibly 
converted is moved back to the move source, can restore the 
pre-conversion content on the move source. 

5 

MEANS TO SOLVE THE PROBLEM 

[0006] In order to solve the above problem, the present 

invention is a content moving device for moving stored 
content to a portable recording medium. The content moving 

10 device includes a storage unit storing original content; a 
generation unit operable to perform irreversible conversion 
on the original content, which lowers a quality thereof, to 
generate converted content; an extraction unit operable to 
extract partial data which is part of the original content; 

15 a replacing unit operable to replace a portion of the original 
content corresponding to the extracted partial data with 
different data; and a write unit operable to write the 
converted content and the extracted partial data to the 
recording medium. 

20 

EFFECTS OF THE INVENTION 

[0007] By having the aforementioned structure, the 

content moving device of the present invention can disable 
content stored in the storage unit so it cannot be played, 
25 and make only the converted content recorded on the recording 
medium playable in order to protect a copyright. 

Also, if the partial data is written back to the 
disabled portion of the content stored in the storage unit. 



and the converted content recorded on the recording medium 
is erased, the content in the content moving device can be 
restored to its state before being moved to the recording 
medium while protecting a copyright. 
5 [0008] Also, the extraction unit may extract the partial 

data which is of a predetermined length and from a 
predetermined position e#in the original content. 

According to this structure, it is possible to make the 
content unplayable since data of a given length from a given 

10 location in the content can be disabled. 

For example, if control data necessary for playback is 
included in the data portion of the given length from the 
given location, playback of the content becomes impossible. 
[0009] Also, the original content may include at least 

15 intraf rame-coded compressed frame images, and the extraction 
unit may extract part or all of the intraf rame-coded 
compressed frame images as the partial data. 

According to this structure, complete playback of the 
content is made impossible and a copyright can be reliably 

20 protected since part or all of the intraf rame-coded 
compressed frame images have been extracted. 
[0010] If interf rame-coded compressed frame images are 

also included in the extracted data, it is possible to also 
make the intraf rame-coded compressed frame images unplayable 

25 by making the interf rame-coded compressed frame images 
unplayable . 

Also, the original content may be composed of a 
plurality of fixed length data blocks, the extraction unit 



may extract a single data block from the plurality of data 
blocks, judge whether part of the intraf rame-coded 
compressed frame images is included in the extracted data 
block, and if included, output the extracted data block as 
5 the partial data, and the replacing unit may replace the 
portion of the original content corresponding to the 
extracted data block with different data. 

[0011] According to this structure, it is possible to 

reliably disable a data block pertaining to interf rame-coded 

10 compressed frame images. 

Also, the data blocks constituting the original content 
may be generated by encrypting a digital copyrighted work 
per the fixed length. The extraction unit may include a 
decryption subunit operable to decrypt the extracted data 

15 block to generate a decrypted data block, and a judging 
subunit operable to judge whether part of the 
intraf rame-coded compressed frame images is included in the 
decrypted data block, and if included, output the extracted 
data block as the partial data. The replacing unit may 

20 replace the portion of the original content corresponding 
to the decrypted data block judged to include the part of 
the intraf rame-coded compressed frame images with different 
data . 

[0012] According to this structure, it is possible to 

25 reliably disable a data block pertaining to interf rame-coded 
compressed frame images in an encrypted digital copyrighted 
work. 

Also, the write unit, instead of writing the partial 
5 



data to the recording medium, may further encrypt, using a 
medium key of the recording medium, the decrypted data block 
judged to include part of the intraf rame-coded compressed 
frame images, and write the encrypted data block to the 
5 recording medium, 

[0013] According to this structure, it is possible to 

reliably protect a copyright since decrypted data blocks are 
encrypted and written to the recording medium. 

Also, the write unit may include a key holding subunit 

10 operable to hold the medium key, an encryption subunit 
operable to encrypt the decoded data block using the medium 
key, a write subunit operable to write the encrypted data 
block and the medium key to the recording medium, and a key 
erasing subunit operable to erase the medium key held in the 

15 key holding subunit. 

[0014] According to this structure, it is possible to 

make unauthorized use of the content even more difficult by 
having separate keys used in the encryption of extracted 
decrypted data blocks and the encryption of data extracted 

20 from the content. 

Also, the extraction unit may further output a position 
in the original content of the extracted partial data, and 
the write unit may further write the position of the extracted 
partial data to the recording medium. 

25 [0015] According to this structure, it is possible to 

easily restore the disabled content by writing the partial 
data back to the position in the content since the position 
of the partial data in the content is written to the recording 



medium. 

Also, in the content moving device which is operable 
to move converted content recorded on the recording medium 
to the content moving device, the recording medium may have 
5 recorded thereon the converted content and the partial data, 
and the storage unit may have stored therein replaced content 
which is the original content in which the portion 
corresponding to the partial data has been replaced with 
different data. The content moving device may further 

10 include a read unit operable to read the partial data from 
the recording medium having the converted content and the 
partial data recorded thereon, a re-replacing unit operable 
to replace the replaced portion with the partial data read 
by the read unit, and an erase unit operable to erase the 

15 partial data and the converted content from the recording 
medium. 

[0016] According to this structure, given that the 

partial data is written back to the disabled portion of the 
content stored in the storage unit and the converted content 

20 recorded on the recording medium is erased, it is possible 
to restore the pre-move content in the content moving device 
while protecting a copyright. 

Also, the portion which is of a predetermined length 
from a predetermined position of the replaced content stored 

25 in the storage unit may have been replaced with different 
data, and the re-replacing unit may replace the portion which 
is of the predetermined length from the predetermined 
position of the replaced content with the read partial data. 



[0017] According to this structure, it is possible to 

easily restore the disabled content by writing the partial 
data of a predetermined length to the predetermined position 
in the content. 

5 Also, the replaced content may be composed of a 

plurality of fixed length data blocks, the data block 
corresponding to the portion which is of the predetermined 
length from the predetermined position of the replaced 
content stored in the storage unit may have been replaced 
10 with different data, the partial data may be a single data 
block from the plurality of data blocks, and the 
re-replacing unit may replace the replaced data block with 
the read partial data. 

[0018] According to this structure, it is possible to 

15 reliably disable the data blocks of a given length by handling 
the content as blocks. 

Also, the data blocks constituting the replaced content 
may be generated by encrypting a digital copyrighted work 
per the fixed length, and the recording medium may have 
20 recorded thereon reencrypted data generated by decrypting 
the extracted partial data and encrypting the decrypted 
partial data using the medium key of the recording medium. 
The read unit, instead of reading the partial data from the 
recording medium, may read the reencrypted data, and the 
25 re-replacing unit, instead of replacing the replaced data 
block of the replaced content with the read partial data, 
may decrypt the reencrypted data using the medium key, 
perform encryption, being the same as an encryption performed 



on the digital copyrighted work, on the decrypted data to 
generate the partial data, and replace the replaced data 
block of the replaced content with the generated partial 
data . 

5 [0019] Also, the medium key may be stored on the 

recording medium. The re-replacing unit may include a key 
reading subunit operable to read the medium key from the 
recording medium; a decryption subunit operable to decrypt 
the reencrypted data using the medium key; an encryption 

10 subunit operable to perform encryption, which is the same 
as the encryption performed on the digital copyrighted work, 
on the decrypted data to generate the partial data; a 
replacing subunit operable to replace the replaced data block 
with the generated partial data; and a key erase subunit 

15 operable to erase the medium key stored on the recording 
medium. 

[0020] According to this structure, it is possible to 

handle encrypted content and strengthen the protection of 
a copyright. 

20 Also, the recording medium may further have stored 

thereon a position of the partial data in the replaced content, 
the read unit may further read the position from the recording 
medium, and the re-replacing unit may replace data of the 
replaced content stored in the storage unit with the read 

25 partial data, the data being at the position. 

[0021] According to this structure, it is possible to 

easily restore the disabled content by reading the partial 
data and the position in the content of the partial data. 



which were written to the recording medium, and writing the 
partial data to the position in the content. 

A content moving method of the present invention 
includco is used with a storage unit with content stored 
5 therein and is used in a content moving device for moving 
the content to a portable recording medium. The content 
moving method includes the steps of generating converted 
content by performing irreversible conversion on the content, 
which lowers a quality thereof, extracting partial data, 
10 being part of the content, replacing a portion of the content 
corresponding to the extracted partial data with different 
data, and writing the converted content and the extracted 
partial data to the recording medium. 

[0022] According to this structure, it is possible to 

15 disable content stored in the storage unit so as playback 
is impossible, and to make only the converted content 
recorded on the recording medium playable to protect a 
copyright . 

Also, if the partial data is written back to the 
20 disabled portion of the content stored in the storage unit 
and the converted content recorded on the recording medium 
is erased, it is possible to restore the pre-move content 
in the content moving device while protecting a copyright. 
[0023] A computer program of the present invention 

25 includcci is used with a storage unit with content stored 
therein and is used in a content moving device for moving 
the content to a portable recording medium. The computer 
program includco per forms the steps of generating converted 



content by performing irreversible conversion on the content, 
which lowers a quality thereof, extracting partial data which 
is part of the content, replacing a portion of the content 
corresponding to the extracted partial data with different 
5 data, and writing the converted content and the extracted 
partial data to the recording medium. 

[0024] A recording medium of the present invention is 

computer-readable and has the above computer program of Claim 
■3t6— recorded thereon. 

10 According to this structure, it is possible to disable 

content stored in the storage unit so es — playback is 
impossible, and to make only the converted content recorded 
on the recording medium playable to protect a copyright. 
[0025] Also, if the partial data is written back to the 

15 disabled portion of the content stored in the storage unit 
and the converted content recorded on the recording medium 
is erased, it is possible to restore the pre-move content 
in the content moving device while protecting a copyright. 
A recording medium of the present invention fea &may also 

20 be a recording medium having recorded thereon converted 
content which is a content irreversibly converted to lower 
a quality thereof, and partial data extracted from the 
content . 

[0026] A content moving system of the present invention 

25 is composed of a portable recording medium and a content 
moving device for moving stored content to the recording 
medium. Here, the content moving device includes a storage 
unit storing the content; a generation unit operable to 



perform irreversible conversion on the content, which lowers 
a quality thereof, to generate converted content; an 
extraction unit operable to extract partial data, being part 
of the content; a replacing unit operable to replace a portion 
5 of the content corresponding to the extracted partial data 
with different data; and a write unit operable to write the 
converted content and the extracted partial data to the 
recording medium. A storage area for storing therein the 
converted content and the partial data is provided in the 

10 recording medium. 

[0027] According to this structure, it is possible to 

disable content stored in the storage unit so es— playback 
is impossible, and to make only the converted content 
recorded on the recording medium playable to protect a 

15 copyright. 

Also, if the partial data is written back to the 
disabled portion of the content stored in the storage unit, 
and the converted content recorded on the recording medium 
is erased, it is possible to restore the pre-move content 

20 in the content moving device while protecting a copyright. 

BRIEF DESCRIPTION OF THE DRAWINGS 

[0028] Fig.l shows an overall construction of a content 

record/playback system pertaining to an embodiment of the 
25 present invention; 

Fig. 2 is a block diagram showing a construction of an 
HD recorder and an SD card pertaining to the embodiment of 
the present invention; 



Fig. 3 shows an exemplary data structure of a content; 
Fig. 4 shows exemplary data stored in a content storage 

unit; 

Fig. 5 shows an exemplary structure of data on which 
5 extraction processing is performed; 

Fig. 6 shows an example of data stored on an SD card; 
Fig. 7 is a flowchart showing move processing of the 
content; 

Fig. 8 is a flowchart showing move processing of the 
10 content; 

Fig. 9 is a flowchart showing move processing of the 
content; 

Fig. 10 is a flowchart showing move-back processing of 
the content; and 
15 Fig. 11 is a block diagram showing an exemplary 

construction of an HD recorder which performs move processing 
between devices . 

DESCRIPTION OF THE CHARACTERS 



20 [0029] 


1 


content record/playback system 




10 


content provision device 




30 


network 




100 


HD recorder 




101 


device-record-key storage unit 


25 


102 


content reception unit 




103 


encryption unit 




104 


content storage unit 




105 


encrypted content read unit 
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106 


decryption unit 




107 


conversion unit 




108 


medium-record-key generation unit 




109 


encryption unit 


5 


110 


partial information extraction unit 




111 


encryption unit 




112 


decryption unit 




113 


control unit 




114 


playback control unit 


10 


115 


authentication unit 




116 


write/read unit 




117 


operation instruction acquisition unit 




118 


partial information extraction unit 




120 


monitor 


15 


300 


SD card 




301 


authentication unit 




302 


converted content storage unit 




303 


medium-record-key storage unit 




304 


partial information storage unit 


20 


310 


authentication unit 




311 


transmission/reception unit 



BE S T MODE FOR CARRYING OUT D ETAILED DESCRIPTION OF THE 
INVENTION 

25 [0030] An embodiment of the present invention is 

described below along with exemplary drawings. 
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Embodiment 1 

A content record/playback system of a first embodiment 
pertaining to the present invention is described below with 
reference to the drawings. 

5 

Overview of content record/playback system 1 

As shown in Fig.l, the content record/playback system 
1 of the present invention includes a content provision 
device 10, a hard disk recorder (hereafter, HD recorder) 100, 

10 an SD card 300 for insertion into the HD recorder 100, and 
an HD recorder 400. The content provision device 10 and the 
HD recorder 100 are connected via the Internet, and the HD 
recorder 100 and the HD recorder 400 are connected by a network 
30 which is based on IEEE1394. 

15 [0031] The HD recorder 100 receives content including 

video data, audio data, and control data transmitted from 
the content provision device 10, and stores the received 
content on its internal hard disk. 

The content is a transport stream (hereafter, TS) 

20 created based on the MPEG2 (Moving Picture Experts Group 2) 
specification, and includes CCI (Copy Control Information) 
set to Copy One Generation. 

[0032] The HD recorder 100 can store the received content 

on its internal hard disk, although in this case, the CCI 
25 is reset to "Copy No More" before being stored, which 
indicates that copying is not possible. 

Also, the HD recorder 100 cannot copy the acquired 
content to the inserted SD card 300, although it is possible 



to perforin a move. It is not possible, however, to store the 
content as is in the storage area of the SD card 300 since 
this storage area is smaller than the storage area of the 
hard disk in the HD recorder 100. 
5 [0033] In this case, the HD recorder 100 transcodes the 

high-definition content based on the MPEG2 specification to 
low-definition content based on the high-compression-rate 
MPEG4 specification, and records the content on the SD card 
300 once its data volume has been reduced. The HD recorder 
10 100 also retains the high quality MPEG2 content, but disables 
it to make it unusable. 

[0034] It is possible for the HD recorder 100 to move 

the content on the SD card 300 back to its internal hard disk 
and play back the content, although in this case as well, 
15 the same high-definition content as before the move is played 
back, rather than the low-definition content. 

Structure of the HD recorder 100 

As shown in Fig. 2, the HD recorder 100 is constituted 

20 from a device-record- key storage unit 101, a content 
reception unit 102, an encryption unit 103, a content storage 
unit 104, an encrypted content read unit 105, a decryption 
unit 106, a conversion unit 107, a medium-record- key 
generation unit 108, an encryption unit 109, a partial 

25 information extraction unit 110, an encryption unit 111, a 
decryption unit 112, a control unit 113, a playback control 
unit 114, an authentication unit 115, a write/read unit 116, 
and an operation instruction acquisition unit 117. 



[0035] The HD recorder 100 is specifically a computer 

system constituted from a microprocessor, ROM, RAM, a hard 
disk unit, etc., with a computer program stored in the RAM 
or the hard disk unit. The HD recorder 100 achieves its 
5 functions as the microprocessor operates in accordance with 
the computer program. 

[0036] The device-record- key storage unit 101 is 

constituted from ROM and stores a device-record- key Kl, being 
key information specific to the HD recorder 100, and a device 

10 identifier "ID_A." The device-record- key storage unit 101 
also includes a protection mechanism and is protected from 
unauthorized external access. 

The device-record-key and the device identifier are 
written in advance to the device-record- key storage unit 101 

15 before shipping. 

[0037] The content reception unit 102 securely receives 

content and content identification information (hereafter, 
CID) , which identifies the content, from a content provision 
device 10 in accordance with a protocol specified by the DTCP 

20 (Digital Transmission Content Protection) standard, and 
transmits the received content and the CID to the encryption 
unit 103. 

The DTCP standard is not mentioned in detail since it 
is feasible with a known technology. 
25 [0038] The TS, being the content received by the content 

reception unit 102, is constituted from, for example, an M 
number (M being a natural number) of TS packets (hereafter, 
TSP) from TSP(l) to TSP (M) . 



The content reception unit 102 receives the M number 
of TSPs one by one and in order from TSP(l) to TSP (M) , and 
outputs each TSP to the encryption unit 103 upon reception. 
[0039] Also, the content reception unit 102 extracts, 

5 based on the MPEG2 specification, control data necessary for 
video playback such as a PAT (Program Association Table) , PMTs 
(Program Map Table) , etc. from the TS. The content reception 
unit 103 references the extracted PAT, PMTs, etc., reads a 
VPID, being a packet ID (hereafter, PID) from data regarding 

10 video signals, and notifies the control unit 113 of the VPID. 
[0040] If a device-record-key read instruction is 

received from the control unit 113, the encryption unit 103 
reads the device-record- key from the device-record- key 
storage unit 101, and encrypts the TSPs inputted from the 

15 content reception unit 102 to processing block units, being 
data of a predetermined byte count. The encryption unit 103 
then correlates encrypted blocks, being encrypted processing 
blocks, and the CID inputted from the content reception unit 
102 , and writes the encrypted blocks and the CID to the content 

20 storage unit 104. 

[0041] The encryption unit 103 performs the above 

encryption by running an encryption algorithm El on the 
processing blocks using the device-record-key. 

Here, a processing block is assumed to be 512 bytes 

25 long. 

If, for example, an M number of TSPs (M being a natural 
number) are inputted from the content reception unit 102 in 
order from TSP (1) to TSP (M) as shown inFig.3A, the encryption 



unit 103 breaks the inputted TSPs into 512-byte-long 
processing blocks 151 to 15N (N being a natural number) , as 
shown in Fig.3B, and encrypts each processing block. 
[0042] A processing block 151 is composed from the 

5 188-byte TSP(l) , the 188-byte TSP(2) , and the first 136 bytes 
of the TSP(3) . A processing block 152 is composed from the 
last 52 bytes of TSP(3), the 188-byte TSP(4), the 188-byte 
TSP(5), and the first 84 bytes of the TSP(6). 

Hereafter, the processing block 151 and the processing 

10 block 152 are referred to as Cl(l) and CI (2), respectively. 
Similarly, the processing block 15N is referred to as CI (N) . 
[0043] The encryption unit 103 runs, for example, the 

encryption algorithm El on CI (1) using the device-record- key 
in order to generate an encrypted block ECl(l), maps the 

15 generated ECl(l) with the CID pertaining to the encrypted 
block, and writes ECl(l) to the content storage unit 104. 

Similarly to the above Cl(l), the encryption unit 103 
encrypts the TS shown in Fig.3A to processing blocks as shown 
in Fig.3B, and writes the resulting encrypted blocks 161 to 

20 16^ {N being a natural number) to the content storage unit 
104. An encrypted block 161 (ECl (1) ) is the processing block 
151 (Cl(l)) that was encrypted, an encrypted block 162 
(ECl (2)) is the processing block 152 (CI (2)), and an 
encrypted block 16N (ECl (N) ) is the processing block 15N 

25 (C1(N)) that was encrypted. 

[0044] In the following, positions of the processing and 

encrypted blocks are represented by block numbers— 
rcapcctivcly . 



For example, the block number for CI (2) is "2," the 
block number for CI (3) is "3, " and the block number for CI (N) 
is "N. " Similarly, the block number for EC1(2) is "2," the 
block number for ECl (3) is "3, " and the block number for CI {N) 
5 is "N." 

[0045] The encryption unit 103 is able to receive, from 

the decryption unit 112, concatenated data consisting of a 
CID, a block number, and a processing block . If concatenated 
data is received, the encryption unit 103 runs the encryption 

10 algorithm El on the processing block included in the 
concatenated data using the device-record-key, generates 
encrypted data, and overwrites a processing block with the 
generated encrypted data, the processing block being stored 
on the content storage unit 104 and having the same block 

15 number as the block number included in the concatenated data 
correlated with the received CID. 

[0046] For example, if concatenated data consisting of 

CID "1," block number "2," and processing block "C2(2)" is 
received from the decryption unit 112, the encryption unit 

20 103 runs the encryption algorithm El on C2(2) using the 
device-record-key in order to generate an encrypted block 
EC (2), and overwrites the CID "1" and block number "2" 
position on the content storage unit 104 with EC (2). 
[0047] As a result, the disabled data at the CID "1" and 

25 block number "2" position in the content storage unit 104 
is replaced with data in its form before being disabled. 

The content storage unit 104 is constituted from a hard 
disk unit and correlates the CID written by the encryption 



unit 103 and the encrypted content that consists of groups 
of encrypted blocks, and stores the CID and the encrypted 
content . 

[0048] The content storage unit 104 correlates a CID 171 

5 having the value "1" with the encrypted content composed of 
an N number of encrypted blocks from ECl(l) to ECl (N) , and 
stores them, for example, as shown in Fig, 4. 

The encrypted content read unit 105 receives a read 
instruction including the CID from the control unit 113, 
10 reads, one by one and in order beginning with the lowest block 
number, the encrypted blocks which are stored on the content 
storage unit 104 and are correlated with the CID included 
in the read instruction, and transmits them to the decryption 
unit 106. 

15 [0049] The decryption unit 106 reads the 

device-record-key from the device-record-key storage unit 

101 when the HDD recorder is powered on. As encrypted blocks 
are received one by one from the encrypted content read unit 
105, the decryption unit 106 runs a decryption algorithm Dl 

20 on the received encrypted blocks using the device-record-key 
in order to generate decrypted processing blocks, and outputs 
the generated processing blocks to the conversion unit 107, 
the partial information extraction unit 110, and the playback 
control unit 114. 

25 [0050] For example, if ECl(l) is received from the 

encrypted content read unit 105, the decryption unit 106 runs 
the decryption algorithm Dl on ECl(l) using the 
device-record-key, generates CI (1) , and outputs CI (1) to the 



conversion unit 107 and the partial information extraction 
unit 110. 

Here, the decryption algorithm Dl is an algorithm for 
decrypting encrypted data generated by the encryption 
5 algorithm El, 

[0051] The conversion unit 107 converts the content, 

which is composed of processing blocks received from the 
decryption unit 10 6 and is encoded to the MPEG2 specification, 
to content encoded to the MPEG4 specification (hereafter, 

10 converted content) , and transmits the converted content to 
the encryption unit 109. 

For example, the conversion unit 107 receives 
processing blocks CI (1) , CI (2) , CI (3) . . .CI {N) in order from 
the decryption unit 106, and judges whether the received 

15 processing blocks can be transcoded to the MPEG4 
specification. The conversion unit 107 determines, for 
example, whether pictures such as I-pictures are decodable 
based on the MPEG2 specification, and judges the pictures 
to be transcodable if they are decodable. 

20 MPEG4-specification converted blocks 02 (1) , 02 ( 2 ) . . . 02 ( F) 
(F being a natural number) are generated by collectively 
transcoding the processing blocks which constitute the 
pictures to MPEG4 . 

[0052] The medium-record-key generation unit 108 

25 receives, from the control unit 113, a first generate 
instruction which shows an instruction to generate a 
medium-record-key for the converted content and includes the 
device identifier and the CID. The unit 108 generates a 



medium-record-key KT4 using a pseudo-random number and 
transmits this key to the encryption unit 109. The unit 108 
also writes the KT4 to a medium-record- key storage unit 303 
of the SD card 300 which is described hereinafter, and erases 
5 the KT4 remaining in the medium- record- key generation unit 
108. 

[0053] Also, the medium- record- key generation unit 108 

receives, from the control unit 113, a second generate 
instruction which shows an instruction to generate a 

10 medium-record-key for partial information and includes the 
device identifier and the CID. The unit 108 generates a 
medium-record-key KT2 using a pseudo-random number, and 
transmits this key to the encryption unit 111. The unit 108 
also writes the KT2 to the medium-record- key storage unit 

15 303 of the SD card 300 which is described hereinafter, and 
erases the KT2 remaining in the unit 108. 

[0054] The encryption unit 109 receives the device 

identifier, the CID, and the KT4 from the medium-record-key 
generation unit 108. When the converted content is received 

20 from the conversion unit 107, the encryption unit 109 runs 
an encryption algorithm E2 on each converted block, being 
data of a given length, in the converted content using the 
KT4 in order to generate encrypted converted blocks. The 
encryption unit 109 then correlates the encrypted converted 

25 blocks with the device identifier and the CID, and writes 
the encrypted converted blocks, the device identifier, and 
the CID to a converted content storage unit 302 in the SD 
card 300 which is described hereinafter. 



[0055] The partial information extraction unit 110 

extracts, from among the processing blocks received 
sequentially from the decryption unit 106, a processing block 
which includes data of the first 512 bytes of an I-picture 
5 using a packet ID of the TSP in the processing block and a 
PCT flag whose value is "1" that is included in a head portion 
of the I-picture. 

The following describes an exemplary case in which 
processing blocks Cl(l) to CI (7) are inputted in order to 
10 the partial information extraction unit 118, as shown in 
Fig. 5. 

[0056] Here, it is supposed that the partial information 

extraction unit 110 has received the CID and the VPID from 
the control unit 113, and a packet ID (hereafter, FID) of 

15 a TSP, which is encoded video data, is the value "VPID." 

First, the partial information extraction unit 110 
judges whether an inputted processing block includes a TSP 
in which PID=VPID. If judged in the negative, the processing 
block is discarded, and if judged in the affirmative, the 

20 unit 110 further judges whether the TSP includes a PCT with 
a value of "1." 

[0057] If the processing block includes a TSP in which 

PID=VPID and the PCT is "1," the encrypted block shown by 
the block number of the processing block is overwritten with 
25 disabled data, and the byte count of the TSP included in the 
processing block is stored as a disabled byte count. 

In the case of Fig. 5, EC1(2), which is an encrypted 
block stored on the content storage unit 104 and has the same 



block number as the processing block with block number "2" 
which is included in TSP(5), is overwritten with disabled 
data since CI (2) includes TSP(5) in which PID=VPID and the 
PCT is "1". 

5 [0058] At this time, since TSP(5) in processing block 

CI (2) includes 188 bytes, the disabled byte count is set to 
be 188 bytes. 

Next, the partial information extraction unit 110 
judges whether an inputted processing block includes a TSP 

10 in which PID=VPID. 

If it is judged that a TSP in which PID=VPID is not 
included, the processing block is discarded. If it is judged 
to be included, an encrypted block which is shown by a block 
number of the processing block and is stored on the content 

15 storage unit 104 is overwritten with disabled data, and a 
byte count of the TSP included in the processing block is 
stored as a disabled byte count. 

[0059] Also, the block number of the processing block 

and the processing block itself are concatenated, whcrcby and 

20 the partial block resulting from the concatenation is 
transmitted to the encryption unit 111. 

Here, a partial block of processing block CI (L) , whose 
block number is L, is referred to as PCI (L) (L being a natural 
number), and PCI (L) is shown as (L| |C1(L)) . The character 

25 "M" shows concatenation. 

[0060] For example, if the applicable processing block 

is CI (2), the partial block PCI (2) is (2||C1(2)). 

A processing block which includes a TSP in which 



PID=VPID as above would correspond to CI (4) and CI (6). 

The partial information extraction unit 110 overwrites 
the encrypted block ECl (4) with disabled data, EC1(4) being 
stored on the content storage unit 104 and having the same 
5 block number as CI (4) whose block number is "4," and adds 
188 bytes, being a byte count of TSP(IO) which is included 
in CI (4), to the disabled byte count. 

[0061] Also, the partial information extraction unit 

110 transmits PCI (4) = (4 MCI (4) ) to the encryption unit 111 . 

10 Similarly, the partial information extraction unit 110 

overwrites the encrypted block ECl (6) with disabled data, 
ECl (6) being stored on the content storage unit 104 and having 
the same block number as CI (6) whose block number is "6," 
and adds 188 bytes, being a byte count of TSP(IO) which is 

15 included in CI (6), to the disabled byte count. 

[0062] Also, the partial information extraction unit 

110 transmits PCI { 6) = ( 6 | | CI ( 6) ) to the encryption unit 111 . 

Given that the disabled byte count, which is 564, 
exceeds 512 bytes, the partial information extraction unit 

20 110 clears the disabled byte count to 0 bytes and returns 
to processing which judges whether the aforementioned 
processing block includes a TSP in which PID=VPID and the 
PCT is "1". 

[0063] As a result of the above processing, it is 

25 possible to select a processing block which includes the 
first 512 bytes or more of video data corresponding to an 
I-picture, and to disable it. 

The encryption unit 111 receives the device identifier, 

26 



the CID, and the KT2 from the medium- record- key generation 
unit 108. When a partial block is received from the partial 
information extraction unit 110, the encryption unit 111 runs 
an encryption algorithm E3 on the received partial block 
5 using the KT2 in order to generate an encrypted partial block, 
correlates the encrypted partial block with the device 
identifier and the CID, and writes the encrypted partial 
block, the device identifier, and the CID to the partial 
information storage unit 304 in the SD card 300 which is 
10 described hereinafter. 

[0064] The encrypted partial block resulting from the 

encryption of partial block PCl(L) is herebelow referred to 
as EPCl (L) . 

The decryption unit 112 can receive, from the control 
15 unit 113, a partial information read instruction including 
the CID and the device identifier. When the partial 
information read instruction is received, the decryption 
unit 112 reads the KT2 correlated with the CID and the device 
identifier included in the partial information read 
20 instruction, and which is stored in the medium-record- key 
storage unit 303 in the SD card 300 which is described 
hereinafter. The decryption unit 112 also reads, one by one 
and in order from the lowest block number, the encrypted 
partial blocks which are correlated with the CID and the 
25 device identifier included in the partial information read 
instruction, and which are stored in the medium-record-key 
storage unit 303 in the SD card 300 which is described 
hereinafter. The decryption unit 112 runs a decryption 



algorithm D3 on the read encrypted partial blocks using the 
KT2, restores the partial blocks which are a conjoining of 
the block numbers and processing blocks, and transmits the 
restored partial blocks to the encryption unit 103. 
5 [0065] Here, the decryption algorithm D3 is an algorithm 

for decrypting data encrypted by the encryption algorithm 
E3. 

For example, if the decryption unit 112 reads encrypted 
partial block EPCl (L) from the partial information storage 

10 unit 304, the unit 112 runs the decryption algorithm D3 on 
EPCl (L) using the KT2 in order to generate PCI (L) = (L | | CI (L) ) , 
and transmits PCI (L) to the encryption unit 103. 
[0066] The control unit 113 controls all operations of 

the HD recorder 100. 

15 The control unit 113 reads the device-record-key and 

the device identifier from the device-record-key storage 
unit 101 when the device is powered on, and holds them. 

The control unit 113 receives operation instruction 
information from the operation instruction acquisition unit 

20 117 and performs processing corresponding with the received 
operation instruction information. 

[0067] If operation instruction information indicating 

a content move and including the CID of the content to be 
moved is received from the operation instruction acquisition 
25 unit 117, the control unit 113 transmits an authentication 
instruction to the authentication unit 115. If mutual 
authentication processing by the authentication unit 115 is 
successful, the control unit 113 further transmits a read 



instruction including the CID to the encrypted content read 
unit 105; transmits to the medium-record- key generation unit 
108 a first generate instruction which shows an instruction 
to generate a medium-record- key for the converted content 
5 and includes the device identifier "ID_A" and the CID, and 
a second generate instruction which shows an instruction to 
generate a medium-record-key for the partial information and 
includes the device identifier "ID_A" and the CID; and 
notifies the partial information extraction unit 110 of the 
10 VPIDs. 

[0068] If the VPIDs are received from the content 

reception unit 102, the control unit 113 also stores them 
in the content storage unit 104. 

If operation instruction information which indicates 

15 playback of the content and includes the CID of the content 
to be played back is received from the operation instruction 
acquisition unit 117, the control unit 113 transmits a read 
instruction including the CID to the encrypted content read 
unit 105, and transmits an instruction to the playback 

20 control unit 114 to play back the content. 

[0069] If operation instruction information which 

indicates a move-back and includes the CID of the content 
to be moved back is received from the operation instruction 
acquisition unit 117, the control unit 113 transmits an 

25 authentication instruction to the authentication unit 115. 

The control unit 117 receives a result of the 
authentication processing from the authentication unit 115. 
If the authentication processing was successful, the control 



unit 117 transmits a device-record- key read instruction to 
the encryption unit 103, erases the KT4 which is correlated 
with the device identifier "ID_A" and the CID and is stored 
in the mediura-record-key storage unit 303, erases the 
5 converted content which is correlated with the device 
identifier "ID_A" and the CID and is stored in the converted 
content storage unit 302, and transmits a partial information 
read instruction including the device identifier "ID_A" and 
the CID to the decryption unit 112. 

10 [0070] If the authentication processing fails, the 

control unit 113 ends processing. 

The playback control unit 114 is composed of an MPEG 
decode circuit and a DA (Digital to Analog) converter, and 
receives a TS from the content reception unit 102 and the 

15 decryption unit 106 in TSP units. 

The MPEG decode circuit decodes, based on the MPEG2 
specification, the received TS to digital signals which show 
the pre-compression video and audio, converts, using the DA 
converter, the decoded digital signals to analog signals 

20 which show the video and audio, and outputs the analog signals 
to the monitor 120. 

[0071] Since MPEG2 is a known technique, its description 

has been omitted. 

The authentication unit 115 receives an authentication 
25 instruction from the control unit 113 to authenticate the 
SD card 300, performs mutual authentication processing with 
the SD card 300, and transmits a result of the authentication 
processing to the control unit 113. 



If the mutual authentication processing with the SD 
card 300 is successful, the SD card is thereafter permitted 
to write data to the HD recorder 100. 

[0072] The authentication unit 115 performs the mutual 

5 authentication processing based on the CPRM (Content 

Protection for Recordable Media) specification, for example. 
CPRM is a known technique and is not particularly described 
herein . 

The write/read unit 116 performs reading and writing 
10 of information to the SD card 300. 

The operation instruction acquisition unit 117 
includes a reception circuit for a remote controller and 
various buttons such as a power button, a record button, a 
move button, a reception-channel set button, a menu button, 
15 a select button, a cursor-move button, and a content ID select 
button . 

[0073] The operation instruction acquisition unit 117 

receives button and remote controller operations from the 
user, and outputs operation instruction information 

20 indicating the received operations to the control unit 113. 

The monitor 120 is a TV receiver with a built-in display 
and speakers. The monitor 120 receives video signals from 
the playback control unit 114, displays the video on the 
display based on horizontal synchronization signals and 

25 vertical synchronization signals, receives audio signals 
from the playback control unit 114, and converts the received 
audio signals to audio which is outputted to the speakers. 
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structure of the SD card 300 

As shown in Fig. 2, the SD card 300 is constituted from 
an authentication unit 301, a converted content storage unit 
302, a medium-record-key storage unit 303, and a partial 
5 information storage unit 304, 

[0074] Here, a storage area in the SD card 300 is 

constituted from a secure storage area and non-secure storage 
areas. Specifically, the medium-record- key storage unit 

303 is the secure storage area, and the converted content 
10 storage unit 302 and the partial information storage unit 

304 are the non-secure storage areas. 

The SD card 300 is specifically a computer system 
constituted from a microprocessor, ROM, RAM, etc., whereby 
the RAM stores a computer program. The SD card 300 achieves 
15 its functions as the microprocessor operates in accordance 
with the computer program. 

[0075] The authentication unit 301 performs mutual 

authentication processing with the authentication unit 115 
in the HD recorder 100 in accordance with a request from the 

20 authentication unit 115. 

If the mutual authentication processing is successful, 
the authentication unit 301 thereafter permits the HD 
recorder 100 to read and write data to the secure 
medium-record-key storage unit 303. 

25 [0076] The converted content storage unit 302 stores the 

converted content written by the encryption unit 10 9. 

For example, the converted content storage unit 302 
correlates a device identifier ID_A (165) and a CID 166 with 



an F number of encrypted converted blocks EC2 (1) to EC2 (F) , 
and stores the device identifier, the CID, and the encrypted 
converted blocks as shown in Fig. 6. 

The medium- record- key storage unit 303 correlates a 
5 device identifier ID_A (335) and a CID 336 with a 
medium-record-key KT2 (331) and a KT4 (332), as shown in Fig . 6 , 
which were written by the medium-record-key generation unit 
108, and stores the device identifier, the CID, and the 
medium-record-keys . 
10 [0077] The partial information storage unit 304 

correlates, for example, the device identifier ID_A (335) 
and the CID 35 6 with a G number (G being a natural number) 
of encrypted converted blocks PECl (1) to PECl (G) , and stores 
them as shown in Fig. 6. 

15 

Operations 

Operations of the content record/playback system 1 are 
described in the order of (1) move processing of content from 
the HD recorder 100 to the SD card 300 and (2) move-back 
20 processing of moved content from the SD card 300 to the HD 
recorder 100. 

(1) Move processing 

Processing which moves content stored in the 
aforementioned content storage unit 104 to the SD card 300 
25 is described using Figs . 7 to 9. 

[0078] Here, a CID "1" (171) and ECl (1) to ECl (N) are 

correlated and stored as encrypted content as shown in Fig. 4 
on the content storage unit 104, and data is assumed to not 



be stored in the converted content storage unit 302, the 
medium-record-key storage unit 303, and the partial 
information storage unit 304 of the SD card 300. 

The user instructs a move of the content by operating 
5 the remote controller, 

[0079] The operation instruction acquisition unit 117 

transmits to the control unit 113 operation instruction 
information which indicates a move instruction and includes 
a CID of the content to be moved (step S301) . 
10 The control unit 113 transmits to the authentication 

unit 115 an instruction to perform authentication with the 
SD card 300. 

The authentication unit 115 performs mutual 
authentication processing with the authentication unit 301 
15 of the SD card 300, and notifies the control unit 113 of the 
result of the authentication (step S302) . 

[0080] If the mutual authentication fails (step 

S303:NO), processing is ended. 

If the mutual authentication is successful (step 

20 S303:YES), the control unit 113 transmits to the 
medium-record-key generation unit 108 a first generate 
instruction which includes the device identifier "ID_A" 
which was read in advance from the device-record- key storage 
unit 101 and the CID included in the operation instruction 

25 information. The medium-record-key generation unit 108 
receives the first generate instruction, generates the 
medium-record-key KT4, and transmits the ID_A, the CID, and 
the KT4 to the encryption unit 10 9 (step S304) . 



[0081] The control unit 113 transmits a second generate 

instruction including the ID_A and the CID to the 
medium-record-key generation unit 108 which receives the 
second generate instruction, generates the 

5 medium-record-key KT2, and transmits the ID_A, the CID, and 
the KT2 to the encryption unit 111 (step S305) . 

The control unit 113 notifies the partial information 
extraction unit 110 of the CID and the VPID (step S306) . 
[0082] The control unit 113 transmits a read instruction 

10 to the encrypted content read unit (step S307) . 

The encrypted content read unit 105 receives the read 
instruction from the control unit 113, and resets an internal 
variable i to "1" (step S308) . 

The partial information extraction unit 110 receives 
15 the VPID, resets an internal variable j to "1," and resets 
k to "0" (step S309) . 

[0083] The encrypted content read unit 105 judges 

whether the internal variable i is greater than a number of 
encrypted blocks stored on the content storage unit 104 (step 
20 S310) . 

If i is greater than the number of encrypted blocks 
(step S310:YES), the encrypted content read unit 105 
transmits a medium- record- key write instruction to the 
medium-record-key generation unit 108. 
25 The medium-record-key generation unit 108 writes the 

ID_A, the CID, the KT4, and the KT2 to the medium-record- key 
storage unit 303 (step S311) , deletes the KT4 and the KT2 
remaining on the medium-record-key generation unit 108, and 



ends processing, 

[0084] If i is less than the number of encrypted blocks 

(step S310: NO), the encrypted content read unit 105 reads 
ECl(i) from the content storage unit 104, and transmits the 
5 read ECl(i) to the decryption unit 106 (step S312) . 

The decryption unit 106 runs the decryption algorithm 
Dl on ECl(i) using the device-record- key Kl in order to 
generate CI (i) , and transmits the generated CI (i) to the 
partial information extraction unit 110 and the conversion 
10 unit 107 (step S313) . 

[0085] The partial information extraction unit 110 

receives CI (i) , and judges whether the received Cl(i) 
includes a TSP in which PID=VPID (step S321) . 

If CI (i) does not include a TSP in which PID=VPID (step 
15 S321: NO), i is incremented one value (step S314), and 
processing moves to step S310. 

If 01 (i) includes a TSP in which PID=VPID (step S321: 
YES) , the partial information extraction unit 110 judges 
whether k is "0" (step S322) . 
20 [0086] If k is not "0" (step S322:NO), processing moves 

to step S324 which is described hereinafter. 

If k is "0" (step S322:YES), the partial information 
extraction unit 110 judges whether the TSP in which PID=VIP 
includes a PCT whose value is "1" (step S323) . 
25 If a PCT whose value is "1" is not included (step 

S323:NO), processing moves to step S314. 

[0087] If a PCT whose value is "1" is included (step 

S323:YES), the partial information extraction unit 110 



transmits PCI ( i) = ( i | | CI ( i) ) to the encryption unit 111. 

The encryption unit 111 runs the encryption algorithm 
E3 on PCI (i) using the KT2 in order to generate PECl (i) (step 
S324) . 

5 The encryption unit 111 writes PECl(i) to the partial 

information storage unit 304 (step S325) . 

[0088] If the ID_A and the CID are not written on the 

partial information storage unit 304, however, the ID_A and 
the CID are correlated with the PECl(i) and written to the 
10 unit 304. 

The partial information extraction unit 110 overwrites 
ECl(i), which corresponds to the CID and is stored on the 
content storage unit 104, with null data (step S326) . 

The partial information extraction unit 110 adds a byte 
15 count of the TSP in which PID=VPID and which is included in 
CI (i) to k (step S327) . 

[0089] The partial information extraction unit 110 

judges whether k is greater than 512 (step S328) . 

If k is greater than 512 (step S328:YES), k is reset 
20 to "0" (step S329), and processing moves to step S314. 

If k is less than 512 (step S328:NO), processing moves 
directly to step S314. 

[0090] Also, in step S313, the conversion unit 107 

receives CI (i) which was transmitted from the decryption unit 
25 106 (step S341) , and judges whether transcoding is possible 
based on data which has been received from the decryption 
unit 106 so far and is being stored (step S342) . 

If transcoding is not possible (step S342:NO), the 



conversion unit 107 waits to receive the next data from the 
decryption unit 106 (step S347). 

[0091] If transcoding is possible ( step S342 : YES ) , the 

conversion unit 107 executes transcoding per given data unit, 
5 resulting in the generation of converted block C2(j) (step 
S343) , and transmits C2 (j) to the encryption unit 109. 

The encryption unit 109 receives C2 (j) , runs the 
encryption algorithm E2 on C2 ( j) using the KT4, and generates 
EC2 ( j) (step S344) . 
10 [0092] The encryption unit 109 correlates EC2(j) with 

the ID_A and the CID, and writes EC2 ( j) to the converted 
content storage unit 302 (step S345) . 

However, if the ID_A and the CID are not written on the 
converted content storage unit 302, the encryption unit 109 
15 correlates the ID_A, the CID, and EC2 ( j) , and writes EC2 (j) 
to the converted content storage unit 302. 

The conversion unit 107 increments j one value (step 
S346), and processing moves to step S347. 

[0093] As a result of the above processing and as shown 

20 in Fig. 6, theID_A165, the CID 166, and the F number (F being 
a natural number) of converted blocks EC2(1) to EC2(F) are 
correlated and stored in the converted content storage unit 
302 of the SD card 300; the ID_A 335, the CID 336, the KT2 
(331), and the KT4 (332) are correlated and stored in the 
25 medium-record-key storage unit 303; and the ID_A 355, the 
CID 35 6, and the G number (G being a natural number) of 
encrypted partial blocks PECl(l) to PECl(G) are correlated 
and stored in the partial information storage unit 304. 



[0094] The ID_A 165, the ID_A 335, and the ID_A 355 are 

device identifiers carrying the same value, while the CID 
166, the CID 336, and the CID 356 are pieces of content 
identification information carrying the same value. 
5 (2) Move-back processing 

A process that moves content, which was moved from the 
HD recorder 100 to the SD card 300 as a result of the 
aforementioned (1) move processing, back from the SD card 
300 to the HD recorder 100 is described below using Fig. 10, 

10 [0095] A user operates a remote controller to instruct 

a move-back of moved content. 

The operation instruction acquisition unit 117 
transmits to the control unit 113 operation instruction 
information which indicates a move-back instruction and 

15 includes a CID of the content to be moved back (step S401) . 

The control unit 113 receives from the operation 
instruction acquisition unit 117 the operation instruction 
information which indicates the move-back instruction and 
transmits an authentication instruction to the 

20 authentication unit 115. 

[0096] The authentication unit 115 executes mutual 

authentication processing with the authentication unit 301 
(step S402) . 

If the mutual authentication processing fails (step 
25 S403:NO), the control unit 113 ends processing. 

If the mutual authentication processing is successful 
(step S403:YES), the control unit 113 transmits a 
device-record-key read instruction to the encryption unit 



103 and erases the KT4 which corresponds to the CID and the 
ID_A and is stored in the medium-record- key storage unit 303 
(step S404) . 

[0097] The control unit 113 erases the converted content 

5 which corresponds to the CID and the ID_A and is stored in 
the converted content storage unit 302 (step S405) . 

When the encryption unit 103 receives the 
device-record-key read instruction, it reads the 
device-record-key Kl from the device-record- key storage unit 
10 101 (step S406) . 

The control unit 113 transmits a partial information 
read instruction which includes the ID_A and the CID to the 
decryption unit 112 (step S407) . 

[0098] The decryption unit 112 reads the KT2 which 

15 corresponds to the ID_A and the CID from the 
medium-record-key storage unit 303 (step S408) . 

The decryption unit 112 resets the internal variable 
i to "1" (step S409) . 

The decryption unit 112 reads PECl (i) which corresponds 
20 to the ID_A and the CID from the partial information storage 
unit 304 (step S410) . 

[0099] The decryption unit 112 runs the decryption 

algorithm D3 on PECl(i) using the KT2 as a key in order to 
restore PCI (X) = (X\ | C2 (X) ) , and transmits the CID and PCI (X) 
25 to the encryption unit 103 (step S411) . 

The encryption unit 103 receives PCI (X) , retrieves 
C2 (X) from PCI (X) , and runs the encryption algorithm El on 
CI (X) using the Kl as a key in order to generate ECl (X) (step 



S412) . 

[0100] The encryption unit 103 overwrites the disabled 

data in the content storage unit 104, whose block number is 
X, and which corresponds to the CID, with ECl (X) (step S413) . 
5 The control unit 113 erases PEC(i) which corresponds 

to the ID_A and the CID from the partial information storage 
unit 304 (step S414) , 

The decryption unit 112 judges whether i is greater 
(than a number of encrypted blocks in the partial information 
10 storage unit) (step S415) . 

[0101] If i is judged to be greater (than the number of 

encrypted blocks in the partial information storage unit) 
(step S415 : YES) , the move-back processing ends . If i is less 
than (the number of encrypted blocks in the partial 
15 information storage unit) (step S415:NO), i is incremented 
one value (step S416) , and processing moves to step S410. 

Also, when the move-back processing ends, the control 
unit 113 erases the ID_A 165 and the CID 166 which are stored 
in the converted content storage unit 302, erases the ID_A 
20 335 and the CID 336 which are stored in the medium-record-key 
storage unit 303, and erases the ID_A 355 and the CID 356 
which are stored in the partial information storage unit 304 . 

Other Variations 
25 The present invention has been described based on the 

above embodiment, although it is certainly not limited to 
the above embodiment. Cases such as the following are 
included in the present invention. 



[0102] (1) The present embodiment is structured so as 

the medium- record- key KT4 and the converted content stored 
on the SD card are erased if the content is moved back from 
the SD card to the HD recorder, although the present invention 
5 is not limited to such a structure. 

For example, the present invention may put the 
converted content into an unusable state by erasing the KT4 
necessary for decoding of the converted content without 
erasing the converted content itself. Also, the present 
10 invention may discard a portion of the converted content 
instead of erasing the entire converted content, thereby 
putting it into an unusable state. 

[0103] (2) The HD recorder may further include a status 

storage unit operable to store thereon a state of progress 

15 of the move processing. 

For example, if a move of a content to the SD card is 
not completed properly, the HD recorder may judge, based on 
the state of progress stored in the status storage unit, 
whether to continue the move processing of the content or 

20 redo the move processing of the content from the beginning. 
[0104] Furthermore, the HD recorder may include a 

notification unit operable to notify the user of the state 
of progress stored in the status storage unit. In such a case, 
the notification unit may notify the user that the move 

25 processing was not completed properly, receive an 
instruction from the user to continue the move processing 
of the content or to redo the move processing of the content 
from the beginning, and execute the move processing based 



on the instruction. 

[0105] (3) In the present embodiment, when a key is 

moved from the HD recorder to the SD card, the key remaining 
on the HD recorder is erased. The HD recorder may be 
5 structured so that after the SD card receives the key and 
records it in a recording area, the HD recorder which sent 
the key is notified that recording of the key was successful, 
whereby the HD recorder erases its remaining key after 
receiving the notification. 

10 [0106] (4) In the present embodiment, an identifier is 

attached to content for uniquely identifying the content. 
When the content is moved from the HD recorder to the SD card, 
the identifier is recorded as well. The HD recorder may be 
structured so that when the content moved to the SD card is 

15 written back to its recording area, the HD recorder judges 
whether the identifier it has stored is uniform vfith with the 
same as the identifier of the content recorded on the SD card, 
and writes the content back only if the two identifiers are 
unifor m the same . 

20 [0107] Also, an identifier which uniquely identifies 

the move-source device may be attached instead of an 
identifier which uniquely identifies the content. In such 
a case, the HD recorder may judge whether the identifier which 
uniquely identifies the move-source device and is attached 

25 to the content is uniform with with the same as its own device 
identifier, and writes the content back only if the two 
identifiers are uniform the same . 

[0108] (5) The embodiment of the present invention is 



structured so es— the HD recorder encrypts partial blocks 
using a medium-record- key and writes the encrypted blocks 
to the SD card, although the structure is not limited a^to 
such. The partial blocks may be encrypted using a 
5 device-record-key and recorded, or the partial blocks may 
be encrypted using a newly generated key and recorded. 

(6) Encryption algorithms El, E2, and E3, and 
decryption algorithms Dl, D2, and D3 are not specifically 
defined in the present embodiment, although encryption and 
10 decryption processing may be performed in accordance with 
a commonly used encryption method such as DES (Data 
Encryption Standard) , AES (Advanced Encryption Standard) , 
etc . 

[0109] Also, authentication processing and 

15 communication processing between the HD recorders and the 
SD card may be performed based on the commonly used CPRM 
standard or another standard capable of copyright 
protection . 

Similarly, authentication processing and 

20 communication processing among multiple HD recorders may be 
performed based on the commonly used DTCP standard or another 
standard capable of copyright protection. 

[0110] (7) The present embodiment is structured so es- 

content is provided from the content provision device to the 
25 HD recorder in a TS format, although the structure is not 
limited as such. 

For example, the HD recorder may include a broadcast 
reception unit such as a tuner, whereby content is delivered 



from the content provision device over broadcast waves via 
a satellite. The HD recorder may receive the broadcast waves 
and restore the content from the received broadcast waves. 
[0111] Also, the HD recorder may read content from a 

5 recording medium such as a DVD (Digital Versatile Disc) or 
BD (Blu-ray Disc) on which content is recorded. 

(8) The HD recorder stores content encoded according 
to the MPEG2 specification, transcodes the content to content 
encoded to the MPEG4 specification, and writes the transcoded 
10 content according to the SD card, although the present 
invention is not limited as such. 

[0112] For example, conversion of the content may not 

always need to be performed. The storage volume of the SD 
card may be large, and conversion of the content from MPEG2 

15 to MPEG4 may not be performed if the content can be recorded 
as it is to the SD card. The HD recorder may calculate, before 
performing move processing, the size of the unused area of 
the SD card' s storage volume and perform move processing 
after judging whether to execute conversion in accordance 

20 with a condition such as the remaining volume of the SD card' s 
storage area. For example, the HD recorder would perform the 
conversion processing if the size of the unused area is 
smaller than the size of the content. 

[0113] Also, the encoding method of the content before 

25 and after the move need not be limited to MPEG2 and MPEG4 . 

The compression rate of an encoding system of the 
content after the move need only be higher than an encoding 
system for encoding of the content before the move. 



For example, the content may be encoded based on the 
MPEG4 specification and recorded on the HD recorder, while 
the content may be transcoded based on the MPEG7 
specification and written to the SD card. 
5 [0114] Also, the HD recorder may judge whether to 

transcode during move processing according to the image frame 
resolution of content based on the MPEG2 specification and 
stored on the HD recorder. 

For example, if the image frame resolution is larger 
10 than VGA (Video Graphics Array) , transcoding may be executed, 
while if the image frame resolution is smaller than VGA, the 
content may be moved from the HD recorder to the SD card 
without executing transcoding. 

[0115] (9) An example of disabling the first 512 bytes 

15 of an I-picture was described, although the present invention 
is not limited as such. 

The content stored in the content storage device need 
only be processed so eethat proper playback is not possible. 

For example, several TSPs (for example, 3) in which 
20 PID=VPID and which include a TSP in which the POT is "4" may 
be disabled. 

[0116] Also, a given position of an I-picture or the 

entire I-picture may be disabled, rather than being limited 
to the first portion, and the disabled data may be scattered 
25 data rather than successive data. 

Also, the disabled data is not limited to an I-picture. 
A P-picture may be combined and disabled, or data used for 
selecting a PAT, PMTs, etc., for example, may be disabled. 



[0117] Also, a predetermined location in the content may 

be disabled, such as the first 64 bytes of a processing block 
or from the 449th byte to the 512th byte. 

(10) In the present embodiment, the HD recorder 
5 concatenates a processing block and a block number which is 
a location thereof in the content to generate a partial block, 
and further encrypts the partial block to generate an 
encrypted partial block which is written to the SD card, 
although the present invention is not limited as such. 

10 [0118] For example, the block number may be stored in 

the content storage unit, and the processing block 
corresponding to the block number may be encrypted and 
written to the SD card. 

In such a case, the HD recorder may read the encrypted 

15 processing block from the SD card, decrypt the processing 
block, read the block number from the content storage unit, 
encrypt the processing block with a device key, and overwrite 
a portion corresponding with the position shown by the block 
number with the encrypted processing block. 

20 [0119] (11) In the present embodiment, an example of 

moving content recorded on the HD recorder to the SD card 
is described, although the present invention is not limited 
as such. The HD recorder may include a high-volume recording 
medium other than a hard disk, such as a DVD (Digital Versatile 

25 Disc) recorder or a BD (Blu-ray Disk) recorder. The SD card 
may be a recording medium other than an SD card, such as an 
IC card, a hard disk, or a DVD disk. 

[0120] (12) The present embodiment is structured so 



■as-that content is moved from the HD recorder to the SD card, 
although the structure is not limited as such. Content may 
be moved from the HD recorder to another HD recorder or 
from a record/playback device to another record/playback 
5 device. 

The HD recorder 400 shown in Fig. 11 is structured as 
the HD recorder 100 to which a transmission/reception unit 
311 operable to perform communication with another HD 
recorder and an authentication unit operable to perform 

10 mutual authentication processing with another HD recorder 
have been added. The converted content storage unit 302, the 
medium-record-key storage unit 303, and the partial 
information storage unit 304 which were included in the SD 
card have been added as well. 

15 [0121] The same processing as the move processing and 

move-back processing described using the HD recorder 100 and 
the SD card 300 of the aforementioned embodiment can be 
realized using the HD recorder 400 and an identically 
structured HD recorder 500. 

20 When moving its content to the HD recorder 500, the HD 

recorder 400 should perform substantially the same 
processing as the move processing and the move-back 
processing that the HD recorder 100 performed with the SD 
card 300. The following points, however, are different. 

25 [0122] (a) The HD recorder 100 in the abovementioned 

embodiment used the write/read unit 116 to write data to and 
read data from the converted content storage unit 302, the 
medium-record-key storage unit 303, and the partial 



information storage unit 304 in the SD card 300. In the 
present variation, however, the HD recorder 400 uses the 
transmission/reception unit 311 to write data to and read 
data from, via the transmission/reception unit 311 in the 
5 HD recorder 500, a converted content storage unit 302, a 
medium-record-key storage unit 303, and a partial 
information storage unit 304 in the HD recorder 500. 
[0123] (b) In the abovementioned embodiment, mutual 

authentication processing was performed between the 

10 authentication unit 115 in the HD recorder 100 and the 
authentication unit 301 in the SD card 300 based on the CPRM 
standard. In the present variation, however, mutual 
authentication processing is performed between the 
authentication unit 310 in the HD recorder 400 and the 

15 authentication unit 310 in the HD recorder 500 based on the 
DTCP standard. 

Also, in the present variation, the converted content 
storage unit 302, the medium- record- key storage unit 303, 
and the partial information storage unit 304 are provided 

20 in the HD recorder 400 and the HD recorder 500 . The converted 
content storage unit 302, the medium-record-key storage unit 
303, and the partial information storage unit 304 may be 
excluded, however, and the converted content, the 
medium-record-key, and encrypted partial blocks may be 

25 stored on the content storage unit 104. 

[0124] (13) The abovementioned devices may be computer 

systems structured specifically from a microprocessor, ROM, 
RAM, a hard disk unit, a display unit, a keyboard, a mouse. 



etc., whereby a computer program is stored in the RAM or the 
hard disk unit, and the devices achieve their functions as 
the microprocessor operates in accordance with the computer 
program. Instruction code which indicates commands to the 
5 computer is structured as a combination of multiple 
instruction codes since the computer program achieves 
predetermined functions. 

[0125] (14) A portion or all of the structure elements 

of the abovementioned devices may be structured as a single 
10 system LSI (Large Scale Integration) . A system LSI is a super 
multifunctional LSI manufactured by integrating multiple 
structural units onto a single chip. Specifically, it is a 
computer system including a microprocessor, ROM, and RAM, 
whereby a computer program is stored in the RAM. The system 
15 LSI achieves its functions as the microprocessor operates 
in accordance with the computer program. 

[0126] (15) A portion or all of the structure elements 

of the abovementioned devices may be structured as a 
removable IC card or stand-alone module. The IC card or the 

20 module would be a computer system including a microprocessor, 
ROM, and RAM. The IC card and the module may also include 
the above super multifunctional LSI. The IC card and the 
module achieve their functions as the microprocessor 
operates in accordance with the computer program. This IC 

25 card or module may be tamper resistant. 

[0127] (16) The present invention may be the methods 

shown above. Also, the present invention may be computer 
programs for causing computers to rcalizc execute the methods, 



or may be digital signals representing the computer programs . 

Also, the present invention may be a computer-readable 
recording medium such as a flexible disk, a hard disk, a CD-ROM, 
an MO, a DVD, a DVD-ROM, a DVD-RAM, a BD (Blu-ray Disc) , or 
5 a semiconductor memory on which the computer programs or the 
digital signals are recorded. The present invention may be 
the computer programs or the digital signals which are 
recorded on these recording media. 

[0128] Also, the present invention may be the computer 

10 programs or digital signals which are transmitted via an 

electronic communications circuit, a wireless or fixed-line 

communications circuit, a network acting as an internet, a 

data broadcast, etc. 

Also, the present invention may be a computer system 
15 including a microprocessor and a memory, whereby the memory 

stores the computer program, and the microprocessor operates 

in accordance with the computer program. 

[0129] Also, the present invention may be carried out 

by another independent computer system by transferring the 
20 program or the digital signals which have been recorded on 
the recording media, or by transferring the program or the 
digital signals via the network, etc. 

(17) The above embodiment and the above variations may 
be combined. 

25 

INDU S TRIAL APPLICABILITY 

[0130] As an electrical apparatus or a part of an 

electrical apparatus, the present invention promotes 



production and sales in industries which handle electrica 
apparatuses that record and play back digital content o 
industries which handle semiconductors. 
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ABSTRACT 

To provide a highly user-friendly content moving device 
which prevents unauthorized copying of content and, when 
content that has been irreversibly converted and moved to 
5 a recording medium is moved back to a move source, can use 
the content in its form before irreversible conversion. A 
partial information extraction unit ii^ — extracts, from 
content stored on a content storage unit 10 4, partial data 
necessary for playback of the content, and a write/read unit 

10 116 writes the partial data to a partial information storage 

unit -5^4 and overwrites a portion of the content 

corresponding to the partial data with different data, while 
a conversion unit 107 transcodes the content and writes the 
transcoded content and the partial data to the recording 

15 medium. 



